Static task
static1
Behavioral task
behavioral1
Sample
60851e6765ea5e9f40dcfc3beb43b867ca297e42095c1146b97ef5e985d5d1d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
60851e6765ea5e9f40dcfc3beb43b867ca297e42095c1146b97ef5e985d5d1d3.exe
Resource
win10v2004-20221111-en
General
-
Target
60851e6765ea5e9f40dcfc3beb43b867ca297e42095c1146b97ef5e985d5d1d3
-
Size
768KB
-
MD5
1a1faca89dc0cfd8988797a018e40f42
-
SHA1
e8c9a58abee38072fef148ee6057e482a5e4e5c7
-
SHA256
60851e6765ea5e9f40dcfc3beb43b867ca297e42095c1146b97ef5e985d5d1d3
-
SHA512
dc3497f6c8e3c64b77a82a3d06e78ee813b10dd4fcf7852238399c726d5709458f40439eba20df9fda3f3156f9ec2c1fd97afe3f1958aa90782b6b0b3182bbab
-
SSDEEP
12288:tP6fu5oVDTJ7zu6PeDJVeIEUpZzV2slyC6HlFaD2MtqX5UhHh7aS2VcJ:tP6fumtTxzu6PeDJVeIEUbgZtMw5uU0
Malware Config
Signatures
Files
-
60851e6765ea5e9f40dcfc3beb43b867ca297e42095c1146b97ef5e985d5d1d3.exe windows x86
67f066d955978813bff7f5c9bbf47df8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleW
DeleteFileW
CreateHardLinkW
CreateSemaphoreA
SetLastError
VirtualProtectEx
GetProcessHeap
CreateMutexA
Sleep
LoadLibraryA
GetLocalTime
lstrlenA
SetEvent
CreateDirectoryW
GetFileAttributesA
SetLastError
GlobalFree
CloseHandle
HeapSize
GetStartupInfoA
GetTickCount
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
vdmdbg
VDMGetPointer
VDMBreakThread
VDMGetContext
VDMDetectWOW
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE